Page History

How ONAP is used in their production environment. They use logging aggregation (Logstash). There is collaboration oportunity for PoC.

Byung presented differences between generic ONAP and Tata Communication. They use syslog for metrics and Logstash for logs aggregation. We are not using sidecar while Tata is using it.

In our reference architecture we separate generation from aggregation. Removing Filebit implementation is for London release. 

Folo logging architecture there is no Best Practice yet. PoC shall be satisfying first.

Bob to send information on Byung who are the key players.

Details to be discussed next week.

Security was not explicitly stated in ONAP but some features are part of the implementation.

Managing network function, policy to pickup a new version and automatically spin up new VNF or CNF this new version and get rid of old xNF that was running.

At the design time we want to deploy 5G core, ONAP would have to create some artifacts in K8s, we shall confirm if ONAP could be used also as security orchestrator (policy language should be rich enough to do that).

Shall we address it with Use Case Subcommittee? Helping implementing secure slices would be important in configuration examples, templates etc.

How to operationalize it? LF IT needs to make those capabilites available like in Marketplace.

It is important to allign OpenSSF recommendations with the budget, resources and deployment activities on LF IT side

Waiver Analysis

Waiver analysis was reviewed.

• Testing components are never part of the release.
• Upstream components will not be solved as well
• For a code produced in ONAP we are in a very good position.
• Have we moved to shared DBs?
• To be checked with Buyng on shared DBs.
• Why ESR is still showing up? It is not part of Jenkins jobs, so some cleaning is needed.

Pawel to check formatting for versions_xfail.txt and Jakarta - checked it is ok.

Specific tickets to be opened for projects.

ONE Summit NARegistration Open

• CFP - Deadline: July 8th; 2022
• Nov. 15 & 16 2022 Seattle, WA, USA
• In Person

LFN Developer & Testing Forum NARegistration Open

• Nov. 17 & 18 2022 Seattle, WA, USA
• In Person
• Securiung software supply chain by LFN - new topic to be proposed

Proposals to be submitted.

David to be was contacted and invited by Maggie to SECCOM meeting.

Update on Jakarta release

TSC approved the sign off of the Jakarta release on June 30th

Security tests results at 60%: https://logs.onap.org/onap-integration/daily/onap-daily-dt-oom-jakarta/2022-06/30_04-01/

https://wiki.onap.org/display/DW/Jakarta%3A++Lessons+Learned

Muddasar reviewed Jira tickets recently. Some PTLs are using TechnicalDebt tagging and some not at all. Grooming the tickets would be helpful.

Updating packages is technical debt for us.

meeting

.

Youtube link disappears ;-(

https://www.cloudbees.com/customers/IRS

SECCOM MEETING CALL WILL BE HELD ON 19th OF July'22. 

Potentially session Session with David Wheeler on SBOM.

Overview of Tata Communications DTF presentation on their production logging implementation, https://wiki.lfnetworking.org/display/LN/2022-06-DD+-+ONAP%3A+The+Path+to+a+Production-Grade+ONAP - see the "Logs and Metrics: Architecture" and "Monitoring and Troubleshooting" sectionslogging implementation discussion continuation.